Why doesn't risk analysis take role validty date in account?

mritscher77 — Thu, 15 Mar 2018 13:15:49 GMT

Hello,

we have got a problem regarding risk analysis (GRC AC ARA within access request) in case e.g . someone moves to another department.

The two roles A and B together are causing a risk (SoD violation). At the moment the user has got role A which is valid to 03/31/2018. If I try to assign role B valid from 04/01/2018 to the user via access request, the risk occures. The risk analyses shows the risk despite the two roles are separated in time.

An ugly workaround for us is, to wait assigning the role til 04/01/2018.

Do you know another solution of the problem? How do you handle the change of an user to another department?

Regards,

Marco

Re: Why doesn't risk analysis take role validty date in account?

shivam_agarwal1 — Mon, 17 Feb 2020 03:25:24 GMT

Hi Marco

You can refer to KBA - 2733424 which talks about in detail why validity dates are not considered.

Thanks

Shivam

Question Re: Why doesn't risk analysis take role validty date in account? in Financial Management Q&A

Why doesn't risk analysis take role validty date in account?

Re: Why doesn't risk analysis take role validty date in account?